Terabytes of credentials leaked in massive supply-chain attack